I am currently running a firewall made up of a dual homed host. A
number of the users on the internal net are complaining about the two
step process to FTP (their assignments frequently require them to
"get" files from other hosts outside the firewall). I have been asked
to set up a directory on the firewall machine that cn be NFS mounted
by those machines on the internal net. That seems to me that I would
be compromising the firewall in doing that. Can it be done securely?
A thought that occurs to me is to have the firewall mount a directory
exported from one of the internal machines instead. That way the NFS
host is still safely hidden behind the firewall. Are there risks
involved in satisfying my user's request in this way?
Thanks,
-- Rob Tanner
NASA Ames Research Center
tanner @
george .
arc .
nasa .
gov
|
|
